Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.mft
File: V9tCq56777_iEHP1AH_Ddixfuwg.mft (raw, json)
Hash identifier: j9fdSFMVxZUSDGt2fo3iX3O4Ij0wVsAkFYVio4601UM=
Subject key identifier: 32:DE:83:C6:DD:10:15:A7:45:83:F0:BD:89:1E:2B:F0:E2:22:8D:8A
Authority key identifier: 57:DB:42:AB:9E:BB:EF:BF:E2:10:73:F5:00:7F:C3:76:2C:5F:BB:08
Certificate issuer: /CN=A91CA297/serialNumber=57DB42AB9EBBEFBFE21073F5007FC3762C5FBB08
Certificate serial: 087F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V9tCq56777_iEHP1AH_Ddixfuwg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.mft
Manifest number: 0878
Signing time: Fri 28 Mar 2025 20:53:38 +0000
Manifest this update: Fri 28 Mar 2025 20:53:37 +0000
Manifest next update: Fri 04 Apr 2025 20:53:37 +0000
Files and hashes: 1: V9tCq56777_iEHP1AH_Ddixfuwg.crl (hash: vUv1hE596N4ZnQXnD5rT0H2TWaNi4YhYDrDDtgp+Yxc=)
2: 19EF4D1ABE5A11EDAA537748C4F9AE02.roa (hash: miZMhJRep9ETR17YW7gWoj6LqwgVkbNzRlMxX+ZmBhQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2175 (0x87f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CA297
Validity
Not Before: Mar 28 20:53:37 2025 GMT
Not After : Apr 4 20:53:37 2025 GMT
Subject: CN=67e70c52-2a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:58:94:fd:04:06:50:ca:9c:24:30:cb:56:ae:
9b:7e:70:70:c2:46:6b:04:9e:91:f1:c4:d0:03:22:
9c:c9:42:a0:42:4c:37:95:00:52:76:2c:3f:cf:6d:
3d:e3:5a:22:d4:0e:57:5b:5d:39:bb:e9:4d:28:f3:
89:1b:16:a0:41:1e:e0:04:47:c3:24:92:1b:b3:2b:
ca:69:db:fe:6e:6b:4c:af:ee:58:60:2f:29:5b:12:
cd:c2:b3:8b:20:69:05:9f:72:f2:44:b5:5a:fa:a6:
38:8c:a6:e0:eb:f7:ee:fa:20:48:1c:29:9f:9e:0c:
00:31:b1:23:30:3e:0e:6d:2d:3e:08:37:fe:59:93:
0b:f9:6f:ed:0d:59:90:ff:10:60:48:aa:9f:64:a9:
eb:c9:db:b6:1e:6f:0e:ac:81:cf:32:fa:37:37:1f:
83:bd:bb:97:d5:3a:23:8d:d3:e3:d1:f7:5d:32:49:
f9:1f:d3:b4:02:e6:81:40:d2:61:e3:3f:02:af:53:
60:f4:90:da:cb:35:12:78:a4:9c:c2:11:ea:25:34:
3e:e4:58:08:b7:80:0a:53:15:c8:3a:3d:f0:26:e6:
05:42:2f:c6:13:13:eb:75:e8:1c:8b:db:f2:57:59:
a3:96:0d:39:e5:79:6b:d0:55:0a:9e:51:a1:1b:12:
a0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:DE:83:C6:DD:10:15:A7:45:83:F0:BD:89:1E:2B:F0:E2:22:8D:8A
X509v3 Authority Key Identifier:
keyid:57:DB:42:AB:9E:BB:EF:BF:E2:10:73:F5:00:7F:C3:76:2C:5F:BB:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V9tCq56777_iEHP1AH_Ddixfuwg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:5a:fd:68:3d:a7:7d:ef:f3:27:8e:23:7d:d9:8d:17:79:9d:
fb:60:06:6f:e6:9d:21:7d:2e:d6:0d:e5:05:5e:47:29:71:93:
58:5a:89:04:80:18:c2:e9:20:3f:91:23:df:e8:66:e9:61:b9:
03:09:a5:f1:35:25:7c:75:81:0d:b6:15:3a:c6:ff:4e:be:4f:
88:82:60:0c:c0:2d:0e:18:00:e3:61:3f:e4:01:76:fa:da:f8:
10:8e:64:c0:d7:e2:3c:88:3e:65:f4:a0:fd:8c:65:35:b9:33:
3a:71:83:c7:90:3e:cb:24:83:97:6e:4e:3c:3c:fe:52:e1:10:
19:c4:2c:98:0f:14:8d:45:88:bb:a4:f7:ef:56:d2:a7:0b:73:
0e:c9:70:0e:cf:19:7d:85:c1:8b:41:d4:f3:70:d4:e6:27:86:
53:78:f4:84:79:c8:f5:dd:31:b8:fd:4d:36:59:84:18:27:c7:
ff:39:e6:0a:ff:4b:a0:cd:4d:cb:c7:c1:e3:5f:8a:4f:bc:9b:
f1:90:d5:ba:ea:5d:f0:db:77:2c:95:ab:1c:d3:17:17:62:1d:
1b:19:72:20:d3:37:6e:7f:d0:28:7d:dc:53:ad:9a:f7:65:f9:
92:09:f9:9b:a4:45:bf:d2:40:99:85:5f:68:b7:fe:30:40:bc:
d1:0b:9b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:29:19 2025 by rpki-client